Описание
A flaw was found in the Kubernetes CSI Driver for SMB. This vulnerability allows an attacker, with the ability to create PersistentVolumes, to craft volume identifiers containing path traversal sequences. This insufficient validation of the subDir parameter can lead to the driver operating on unintended directories during volume deletion or cleanup, potentially resulting in unauthorized modification or deletion of files outside the intended managed path.
Меры по смягчению последствий
To mitigate this issue, ensure that only trusted and authorized users have the necessary Role-Based Access Control (RBAC) permissions to create PersistentVolumes that utilize the SMB CSI driver. Restricting these permissions limits the attack surface by preventing unauthorized users from exploiting the path traversal vulnerability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Container Platform 4 | openshift4/ose-smb-csi-driver-rhel9 | Fix deferred |
Показывать по
Дополнительная информация
Статус:
6.5 Medium
CVSS3
Связанные уязвимости
Уязвимость драйвера SMB CSI программного средства управления кластерами виртуальных машин Kubernetes, позволяющая нарушителю удалять или изменять произвольные каталоги
6.5 Medium
CVSS3